Error Using 'EntityAttributeExactMatch' Filter for Global R&S

[Cantor, Scott]

On 3/18/16, 12:06 PM, "users on behalf of Rising, Matt" <users-bounces at shibboleth.net on behalf of mrising at towson.edu> wrote:



> 
>The warning is really similar to
>https://issues.shibboleth.net/jira/browse/IDP-762 but on a different filter type, so I’m unsure if I am doing something wrong or hitting a bug.

It is quite plausible it's a similar bug. I don't think the message could occur absent a bug.

> 
>The rule published by InCommon uses the ‘saml’ namespace in the rule type “saml: EntityAttributeExactMatch”
> but the SAML schema (urn:mace:shibboleth:2.0:afp:mf:saml?) isn’t included in the default AttributeFilterPolicyGroup tag in IdPv3’s attribute-filter.xml file.

Because the 3.2 default file was modified to take advantage of the collapsed grammar.

>Do I need to include the ‘saml’ schema or can I just remove the ‘saml:’ reference from the type value?

If you're running 3.2 you don't need the sub-namespaces, it's one big global one and will stay that way.

-- Scott